【已复现】Fastjson 1.2.66–1.2.83 JsonType 纯库一键 RCE（AutoType 关闭仍可利用；完整 RCE 需 JDK8 + Spring Boot LaunchedURLClassLoader）。仅限授权安全研究与本地防御验证。
☆89Jul 21, 2026Updated 2 months ago
Alternatives and similar repositories for 2026FastjsonPoC
Users that are interested in 2026FastjsonPoC are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Docker labs + defensive scanner for fastjson remote-class-load RCE. fastjson 1.2.66-1.2.83: @JSONType resource probe (CVE-2026-16723). fa…☆206Jul 27, 2026Updated 2 months ago
- 基于W01fh4cker大佬的LearnJavaMemshellFromZero从零掌握java内存马的复现重组版本。☆97Jun 15, 2026Updated 4 months ago
- geoserver CVE-2024-36401漏洞利用工具☆45Jul 24, 2024Updated 2 years ago
- Fastjson 1.2.68 ~ 1.2.83 RCE☆95Jul 27, 2026Updated 2 months ago
- dnslog reverse vul-verify 反连平台 漏洞验证☆16Jul 6, 2020Updated 6 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 一些Java RASP demo☆11Sep 26, 2019Updated 7 years ago
- Luvv-MCP 是一个 AI 原生的前端安全分析引擎，接入 Claude Code 后，你说一句"帮我审计这个网站"，AI 就能自动完成技术栈识别（1.8 万条规则覆盖 CMS/框架/CDN/中间件）、泄露扫描（阿里云 AK、GitHub Token、Webhoo…☆42Aug 19, 2026Updated last month
- 内存马查杀工具，尤其针对Agent型，原理是dump出JVM当前的class并进行字节码分析，并加入自动修复的功能☆187May 10, 2023Updated 3 years ago
- 一个批量爬取安全技术社区文章的工具（目前支持先知社区、奇安信攻防社区），支持Markdown、PDF、HTML多种格式输出☆28Updated this week
- Springboot的一个webshell☆45Jul 10, 2019Updated 7 years ago
- ☆36Dec 12, 2022Updated 3 years ago
- 入侵痕迹清理/Cleaning up traces of intrusion☆256Jul 15, 2026Updated 3 months ago
- vshell-firewall is a flexible, high-performance TCP proxy service designed to block fingerprinting and reconnaissance attempts targeting …☆19Sep 15, 2026Updated last month
- ☆16May 19, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Java反序列化漏洞学习☆14Jul 1, 2021Updated 5 years ago
- ☆42Apr 29, 2026Updated 5 months ago
- PHP文件上传50+绕过手法全景解析☆17Mar 16, 2025Updated last year
- QQ小程序反编译逆向/微信小程序反编译逆向/红队攻击面分析/快速漏洞/检查/筛查☆91Jun 13, 2026Updated 4 months ago
- 由夜安团队研发的AI Agent渗透测试平台，强调自监督，自循环，自进化首创寻宝机制、三段式上升结构，此项目主要探索在可控环境（CTF）下的能力☆659Updated this week
- GitHub Advisory Database Skills builder☆75Mar 14, 2026Updated 7 months ago
- ☆18Jun 7, 2023Updated 3 years ago
- 支持Tomcat内存马查杀的JSP脚本☆67Jun 16, 2025Updated last year
- 让fscan再次伟大☆372Sep 28, 2026Updated 2 weeks ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- 6万字奶爸级WebGoat8.X代码审计大全，全文均可复现，适合刚学完JAVASE准备开始代码审计的师傅🌟☆170Jun 15, 2026Updated 4 months ago
- 一些POC、EXP☆11Nov 4, 2019Updated 6 years ago
- 跨平台 CTF 编解码工具箱/密码学工具箱,几百个算法全在浏览器本地运行,零外发。支持一把梭智能解码、配方链、图形编码图鉴、隐写分析与全 Unicode 显示。☆278Updated this week
- java-web 自动化鉴权绕过☆381Apr 3, 2025Updated last year
- 编码解码工具☆21Jan 7, 2025Updated last year
- High-assurance, artifact-agnostic prompt for authorized security labs, exploit-chain research, PoC validation, and evidence-led reporting…☆45Aug 1, 2026Updated 2 months ago
- 用友NC系列漏洞检测利用工具，支持一键检测、命令执行回显、文件落地、一键打入内存马、文件读取等☆598Aug 19, 2023Updated 3 years ago
- 幽狼AI Shell：首款支持AI渗透的高级WebShell & C2管理工具，内置WebShell MCP服务器，支持多层内网级联的ASPX、ASHX高级WebShell管理工具，AES加密通信，无需代理，内存加载渗透工具，无文件落地隐蔽渗透目标，动态代码执行，Shell…☆277Aug 16, 2026Updated 2 months ago
- Rinte是一款专为渗透测试人员设计的 BurpSuite 插件，提供强大的框架自动化安全扫描功能。目前支持1000+POC☆79Aug 13, 2026Updated 2 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- VMware vCenter(Unauthenticated)☆19Nov 2, 2020Updated 5 years ago
- 一款集成了H3C,致远，泛微，万户，帆软，海康威视，金蝶云星空，畅捷通，Struts等多个RCE漏洞利用工具☆250Jul 28, 2024Updated 2 years ago
- 二进制漏洞扫描☆25Sep 16, 2025Updated last year
- 内网安全从零开始红队教程，这可能是国内最系统最适合小白的内网安全教程。☆47Sep 25, 2023Updated 3 years ago
- jwtCracker是一款go语言编写的jwt常见安全问题利用工具☆24May 8, 2024Updated 2 years ago
- Chunsou（春蒐），Python3编写的多线程Web指纹识别工具,适用于安全测试人员前期的资产识别、风险收敛以及企业互联网资产风险摸查。☆400Jul 14, 2026Updated 3 months ago
- GeoServer（CVE-2024-36401/CVE-2024-36404）漏洞利用工具☆123Jan 17, 2025Updated last year